EWC RFC003: Issue Person Identification Data (PID)

Person Identification Data (PID) is a standardized protocol for issuing high-assurance digital identity credentials within the European Wallet Ecosystem. This specification implements the OpenID4VCI workflow for government-approved identity providers to issue PID credentials securely and interoperably.

The protocol ensures that only authorized entities can issue PIDs while maintaining strict security and compliance requirements. It supports both authorization and pre-authorized flows, with comprehensive validation steps for wallet conformity and issuer trustworthiness.

Key features include:

• Secure credential issuance using SD-JWT format
• Integration with national identity providers
• Support for both authorization and pre-authorized flows
• Wallet attestation verification
• Trust anchor validation

Purpose and Scope:

• Establishes a uniform approach for PID issuance across the EWC ecosystem
• Defines security requirements for high-assurance identity credentials
• Ensures interoperability between identity providers and wallet holders
• Implements regulatory compliance with ARF requirements

Technical Specifications:

• Uses OpenID4VCI protocol for credential issuance
• Supports JWT and SD-JWT credential formats
• Implements PKCE for enhanced security
• Requires OAuth 2.0 authorization flows
• Utilizes DID-based identification

Implementation Requirements:

• Identity providers must implement OpenID Provider endpoints
• Wallets must support OAuth 2.0 client functionality
• Support for /.well-known discovery endpoints
• Implementation of wallet attestation verification
• Compliance with Trust Anchor framework

Security Considerations:

• Mandatory wallet conformity checks
• Trust anchor verification for issuers
• Secure credential storage requirements
• Implementation of nonce validation
• Support for deferred credential issuance

Interoperability Features:

• Standardized credential format using SD-JWT
• Common discovery mechanisms
• Unified authorization flows
• Consistent error handling
• Cross-border compatibility

Current Adoption Status:

Being implemented by multiple European identity providers and wallet developers as part of the EUDI wallet initiative